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Field of the Invention 

The present invention is directed to a method [of the 
type elucidated in the definition of the species in Claim 
1, as described in the postscript, JPEG, MPEG-l.]for 
generating digital watermarks for electronic documents. 

Background Information 

Documents which exist in electronic form can be copied as 
often as desired without loss of quality. For that 
reason, [the most ] reliable [possible] methods must be 
employed to prevent such documents from being freely 
disseminated without control, in order to protect the 
rights of the intellectual property owner. 

Due to the rapid growth of the Internet and the 
capability it provides for digitally disseminating 
documents, there is an increased requirement to protect 
against the illegal dissemination of documents and, thus, 
to protect a copyright owner from pirated copies. 

For this reason, large firms, such as IBM, NEC and 
Microsoft, and smaller firms as well, such as Digimarc 

(see Funkschau [ ]_17/97; p. 21) and research institutes, 
such as the Fraunhofer Company IGD and the GMD Darmstadt, 

[are working] have worked on embedding so-called digital 
watermarks in documents. In methods having such a basis, 
information identifying the copyright owner is introduced 
as invisible information into the documents to be 
protected. It is hidden in the document in such a way 
that no outsider can discover it. Only the owner himself 
can make the watermark visible by using his secret key 
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and, therefore, in the case of a legal dispute, for 
example, prove that he is actually the owner. 

There can be different kinds of inserted digital 
5 watermarks and, in this context, each can depend on the 

particular type of document (e.g., postscript, JPEG, 
MPEG-1) . 



Thus, for example, Schneider, M. et al . , in the essay: 
10 "ROBUST CONTENT BASED DIGITAL SIGNATURE FOR IMAGE 

AUTHENTICATION" in Proc . Intl. Conference on Image 
Processing (ICIP) New York, U.S., IEEE, 1996, pp. 
227-23 0, describe a method for embedding digital 
signatures as hidden signatures into the useful data for 
15 verifying the authenticity of data, i.e., proving that 

the data have been manipulated with, in that signatures 
are extracted using hash functions, and the result is 
combined with a private key, so that, altogether, a 
signature is formed which contains characteristics of the 
2 0 original work, as well as the identity of the author. 

As described in this publication, such a signature can be 
transmitted concurrently with the data of the original 
work or also be hidden therein in such a way that it also 

2 5 serves the purpose of a watermark. Also, as described in 

this publication, the digital watermark can additionally 
be provided with an authentic time stamp. 

U.S. Patent No. 5,499,294 also describes generating a 

3 0 digital signature, which is associated with an original 

image and which encompasses both a hash value as well as 
a private key. However, this signature is not used in a 
watermark . 



3 5 U.S. Patent No. 5,809,160 describes a method for 

embedding signature information in original data as 
watermarks, however, without mentioning a hash function. 
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In addition, the abstracts of German Patent Application 
No. 196 15 301 and European Patent 0 845 758 A3 describe 
embedding a digital signature in data that need to be 
able to be authenticated, in each case a key or a secret 
5 key being combined with an extract of the data to form an 

embedded signature. 



Digital watermarks make it possible for a copyright owner 
to prove that an illegally disseminated document is his 

10 or her intellectual property. However, digital watermarks 

do not make it possible to determine who the originator 
of the illegal dissemination is, nor to prove that such a 
person did in fact illegally disseminate the document. 
This is because, in contrast to electronic fingerprints, 

15 digital watermarks do not contain any indication of an 

authorized recipient of a copy of the document. If such a 
recipient himself wants to further disseminate the 
document and appear to be the originator, he can likewise 
provide the document with his digital watermark. This can 

20 lead to the paradoxical situation in a legal dispute that 

both opposing parties can verify their watermark in the 
document at issue and each one can accuse the other of 
the unauthorized copy. 

2 5 In such a case, the court can only pass correct judgment 

when the true originator_ [ ] can also prove_ [ ]a document 
that does not have either watermark or that only has his 
watermark, and not that of the opposing party. However, 
it can be impossible to provide such a proof, especially 

3 0 when working with very voluminous documents that are only 

available in one copy provided with a digital watermark, 
on one publicly accessible server. 



TThe obi ectl Summary of the Invention 

35 

The p resent invention [is to ] enables the true originator 
to verify his intellectual property, beyond any dispute, 
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even in such difficult cases. 



This is rendered possible by the method as set forth [in 
the characterizing part of Claim 1, because it provides 
5 fori herein. In an embodiment, the method provides for 

generating digital watermarks for electronic documents, 
where the owner of a document hides a digital watermark 
as proof of identity id in the document . Prior to being 
hidden, the watermark is not only provided with the proof 

10 of identity id, but also at least with the hash value 

h(m) of the document, and with a secret key for making 
the watermark visible. To verify true authorship, the 
embodiment further allows that the reversibly embedded 
watermark (s) are removed again with the assistance of the 

15 secret key(s) in order to restore the document to its 

original state, i.e., to check it on the basis of its 
hash values. The method is reversible and the digital 
watermark [to not only] can be [dependent upon! separated 
again from the documents for purposes of checking the 

20 identity of the owner [ , but upon the document itself. 

In the characterizing part of Claim 2, this]^ 

In a further embodiment, prior to being hidden, the 
2 5 digital watermark is not only provided with the proof of 

identity id, but also with an authentic time stamp, 
which, besides the time value t. also contains at least 
the hash value h (m) of the document, and, in addition, 
defines the embedding sequence. This method is further 
30 refined to be even more secure fagainstl to enable proof 

of third-party attacks [ . 



The present invention is elucidated further on the basis 
of the following exemplary embodiments:! to be 
3 5 established . 



In a further embodiment, to check the ownership of an 
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electronic document in which a plurality of different 
watermarks were embedded, all embedded watermarks are 
removed, for example, under consideration of the 
embedding sequence, and the hash value of the thus 
5 created document is subsequently generated, which is 

compared to the individual hash values in the different 
watermarks in order to determine the original owner. 

Detailed Description 

10 

In accordance with the [fundamental ideal present 
invention , the watermark is no longer solely dependent 
upon the identity id of the owner, but is additionally 
dependent upon document m. For this, a hash value h(m) of 
15 document m is generated, and the watermark (id, h (m) ) is 

hidden in the document in accordance with the underlying 
idea in such a way that, when the watermark is removed, 
document m can be restored to its original state. 

2 0 If an attacker were, at this point, to follow the same 

strategy as described above, the following would occur: 

• The true originator A files document m' on a server 
that one obtains when one inserts watermark (a,h(m)) 

25 in m. 

• An attacker B T 1 manipulates this document to m* ' by 
additionally inserting the watermark (b,h(m t )) in 
m* . 

• At this point, the court can render a decision in 

30 the proceeding by asking the two opposing parties to 

reveal their watermarks (a) and to then (b) remove 
them from the document . The court can then calculate 
the hash value h (m) from the watermark- free document 
m and check in which of the two watermarks this 

35 value is contained. [ ] 

• Alternatively or additionally, the court could also 
ask each of the two opposing parties to remove his 
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or her watermark and then, from the two different 
documents m' and m* , calculate the hash values and 
check in which watermark these hash values are 
contained . 

[The mentioned] A further [refinement] embodiment of the 
method is based on an authentic time stamp also being 
entered into the watermark- In this context, such an 
authentic time stamp is a time value t, together with 
additional information x, which was provided by an 
independent institution with a digital signature, for 
instance in the form of sig(t,x) . 

In this case, the watermark to be introduced into the 
document includes an authentic time stamp, where the 
additional information includes at least the hash value 
h(m) of document m, and the identity of the owner, e.g., 
in the forms: (a, sig ( t , h (m) ) ) or sig (t , (a, h (m) ) ) . 
E ] 
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2. Abstract 1 Abstract 



[2.1 The present invention is directed to 

verifying] Verification of true authorship on the basis of 
5 digital watermarks [ . 

2.2 To improve one's chances for success in litigious 
cases, prior to being hidden, the] is described. The 
digital watermark [is not only] can be provided with the 
0 proof of identity id [ , but also] and/or with the hash 

value h(m) of the document [ , and it can also be provided] 
and/or with a time value t. 

[2 . 3 The method is suited for verifying the true 
5 authorship of documents which are subject to copyright 

protection . 
] 
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